Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/xHLyst5rCdhKq_xr6fZrDygY9Wk.roa
File: xHLyst5rCdhKq_xr6fZrDygY9Wk.roa (raw, json)
Hash identifier: VJ+zSPGIh9+rBSHp3km7AYwrj4kH0AH2TBHOvWDDO7A=
Subject key identifier: C4:72:F2:B2:DE:6B:09:D8:4A:AB:FC:6B:E9:F6:6B:0F:28:18:F5:69
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0198B44BD1B383A6BA5EEB29B455CB875216
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/xHLyst5rCdhKq_xr6fZrDygY9Wk.roa
Signing time: Sat 16 Aug 2025 19:12:04 +0000
ROA not before: Sat 16 Aug 2025 19:12:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 82.139.233.0/24 maxlen: 24
82.139.234.0/24 maxlen: 24
82.139.236.0/24 maxlen: 24
82.139.237.0/24 maxlen: 24
82.139.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b4:4b:d1:b3:83:a6:ba:5e:eb:29:b4:55:cb:87:52:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Aug 16 19:12:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c472f2b2de6b09d84aabfc6be9f66b0f2818f569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:0f:aa:cf:ae:a9:f1:d3:dc:90:76:a9:c4:
00:32:0f:d1:df:49:ac:bf:93:f7:a0:62:c5:6d:e7:
e0:94:9e:42:f5:d9:89:de:3d:65:ba:6e:89:29:5d:
da:56:c7:dd:42:88:c9:40:e2:f4:e1:38:10:6f:42:
29:cf:a3:6b:2f:f4:76:62:b3:98:90:da:52:4c:6b:
44:ca:44:71:a2:e5:a1:7d:a1:1a:07:99:a9:9d:19:
e0:2c:c1:5c:2f:3c:4a:7c:c8:24:b4:1f:a8:f9:86:
ec:3d:b2:1a:c0:05:69:d0:71:97:85:55:5b:85:35:
21:93:fb:6a:bc:fc:60:a6:92:f7:ed:70:a9:60:dc:
d9:23:4f:6d:06:50:c9:83:aa:1b:de:8e:1b:13:70:
36:06:ac:f4:e4:3f:56:2d:ce:d0:11:5f:58:9a:9c:
e9:ad:f9:7c:e6:fe:4b:5b:20:67:31:ce:c5:43:2c:
b1:ec:13:db:94:e2:5c:9d:bc:e6:73:47:be:e1:c8:
75:d1:ef:f3:aa:ac:42:91:20:7e:41:15:6d:42:15:
8a:fc:59:a2:c9:01:af:0d:34:dc:d5:d3:a9:2e:1a:
07:85:9d:ae:5f:2f:e1:4d:02:34:e0:62:c1:d9:4b:
01:b0:c2:81:2d:02:d3:70:7f:8c:68:4e:ae:4e:a8:
d9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:72:F2:B2:DE:6B:09:D8:4A:AB:FC:6B:E9:F6:6B:0F:28:18:F5:69
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/xHLyst5rCdhKq_xr6fZrDygY9Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.233.0-82.139.234.255
82.139.236.0-82.139.238.255
Signature Algorithm: sha256WithRSAEncryption
3a:bf:61:47:cd:b4:ed:53:0b:a1:f0:62:2a:64:c7:c0:26:58:
38:1c:96:1b:44:11:77:3e:20:c3:d6:1d:f6:0c:c0:2c:02:a9:
7a:d7:bc:01:51:07:bc:7d:28:65:16:2a:0d:93:e0:c7:fb:42:
6f:1d:f2:8f:1b:c2:88:46:53:af:e3:80:27:31:42:2c:d3:f2:
74:62:df:aa:68:d8:df:dc:6f:2a:94:c2:f1:b9:a8:5b:33:e9:
1b:20:df:db:d2:3f:46:1c:db:96:23:a2:f1:a0:b1:72:8e:26:
90:87:1f:15:90:84:21:0c:be:fd:4f:3c:77:0f:25:d8:a5:32:
6e:65:76:3e:78:00:c2:d9:4e:49:a5:86:9f:72:0a:6f:a8:30:
08:40:fe:40:71:3a:a3:61:ad:14:be:7e:7a:95:46:28:c3:31:
67:d1:59:1e:5f:c7:b0:92:c8:f3:0f:cf:0b:9c:ed:77:80:dc:
dc:ae:99:8c:cf:41:4f:8f:d2:7d:c6:df:97:e8:12:60:b3:93:
f5:eb:cc:94:c1:4c:7f:30:6a:f4:f3:f4:b7:0d:88:64:c7:89:
9f:12:79:09:56:12:03:1f:40:ff:44:29:50:5c:5d:16:6f:10:
09:3f:10:38:97:d9:7c:dd:53:10:0a:a7:88:79:49:31:bf:3e:
ce:99:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:34:35 2025 by rpki-client